Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa
File:                     519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa (raw, json)
Hash identifier:          KZt6byakdmDrFrjzA6KewK87ag1HIXYCB9Jg2gLVuTY=
Subject key identifier:   F9:3F:12:1A:AD:D1:37:0F:61:02:4E:5C:E6:72:50:22:7F:54:3D:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F71ED8EE8BD1D1B2B3F256380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     21342
IP address blocks:        2600:1405:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8e:e8:bd:1d:1b:2b:3f:25:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=0e3074c7-66bd-46cc-b5fb-b769cf9714f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:2d:7f:40:97:fc:29:5a:6b:85:79:57:b9:
                    e2:08:8e:bd:c0:2e:fb:21:41:da:70:57:43:a7:81:
                    83:34:cf:29:4a:fb:90:73:59:c5:91:f7:cc:3d:31:
                    51:df:af:6a:65:e0:c7:cd:3a:cf:67:88:6b:fa:47:
                    b3:71:4a:d8:16:b1:f7:90:97:78:21:2c:e2:50:44:
                    c3:54:d4:87:c1:16:0b:18:5a:6a:d1:6b:2b:77:b4:
                    98:2d:f8:5f:a9:1d:03:53:b2:b3:ab:72:ed:0d:8e:
                    1e:d7:90:18:89:36:24:0e:5f:c7:42:7b:ff:fe:14:
                    cc:a3:22:ec:d1:50:f0:fd:6b:26:ba:f7:17:a3:50:
                    7a:ac:89:2d:92:72:49:ac:74:a3:fd:a6:86:cd:05:
                    d9:d9:a6:84:99:ca:36:8a:3e:79:e6:47:1f:ba:ac:
                    b4:f0:d8:ab:08:03:19:8c:34:4a:c1:c2:4c:25:77:
                    c0:a5:9d:b6:33:df:05:ca:d9:0a:7b:c2:f5:59:d4:
                    5b:ff:cf:76:a9:05:58:2d:2d:bb:5d:1c:20:4e:4f:
                    a9:6d:01:81:45:f3:0b:fc:db:a4:84:52:e9:bc:c5:
                    43:49:b1:db:9c:7c:eb:93:eb:e2:7f:2f:32:ae:f5:
                    0d:0a:c1:8b:6f:67:cb:62:97:00:c9:62:40:2c:57:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3F:12:1A:AD:D1:37:0F:61:02:4E:5C:E6:72:50:22:7F:54:3D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:f8:f1:13:2c:2c:61:34:ce:ba:37:73:1a:92:ee:7f:37:
         9d:3f:07:bd:20:d3:2b:5c:55:60:6d:a6:91:fe:7f:83:7c:32:
         b7:b0:25:15:c1:a4:f0:0a:cd:79:15:2f:ff:64:aa:1b:8e:a2:
         3b:3b:ed:9e:d8:3f:0a:90:81:dd:94:16:81:b4:3a:fa:d9:ce:
         f9:60:9c:14:91:6d:30:4a:6f:5a:33:4c:04:da:50:8b:bf:d5:
         e5:61:71:c8:9d:8e:d5:04:03:36:fa:a2:41:f0:cf:fa:b9:4a:
         e9:84:84:93:28:1c:62:20:38:24:54:11:fa:97:bc:07:fe:a1:
         df:4d:5d:9d:f8:e0:99:d9:0e:49:00:a1:36:3d:cf:ce:de:46:
         fa:dc:f9:57:88:74:e3:8e:00:f7:85:a7:a4:11:8d:13:54:ba:
         b5:25:9f:37:ce:d5:37:6e:c9:76:35:dd:de:64:a3:88:3a:80:
         5c:b1:38:fa:53:bd:4b:22:70:ef:58:d1:3d:d4:5a:b6:cc:ae:
         30:ab:20:0d:c2:9a:51:27:2a:99:d8:62:f6:9e:c3:ab:f8:d0:
         bf:8a:2b:4b:12:37:f2:5f:1d:2b:e9:66:f0:12:d5:51:cb:37:
         e8:3a:28:b4:31:e8:22:cf:8f:5f:89:bc:71:94:c4:f0:f2:e2:
         f3:32:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:03 2026 by rpki-client